The IT security researchers at MalwareMustDie have discovered a malware that is capable of infecting Linux-based Internet of Things (IoT) devices and web servers to launch DDoS attacks, called Linux/Luabot. Earlier this week we reported on a similar malware BASHLITE. It is written in the Lua programming language which can infect a system and issue botnet commands.
MalwareMustDie is saying it is “the most advanced botnet hitting Linux-based IoT devices”. It is the first time to find an lua language ELF compiled malware, specifically in ARM CPU architecture.
There’s not much information about how an IoT device gets infected, but you can read some of the technical details at MalwareMustDie.